This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/2f6PQ52RrE2rBdK-zJ6WM_j95eI.roa File: 2f6PQ52RrE2rBdK-zJ6WM_j95eI.roa (raw, json) Hash identifier: uNZ99GxNYSx799rRk/4xuT3cH59ZCsDIn0sSjir72VU= Subject key identifier: D9:FE:8F:43:9D:91:AC:4D:AB:05:D2:BE:CC:9E:96:33:F8:FD:E5:E2 Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B77C74C61F31FFF4B83C674CDF0C478DC Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/2f6PQ52RrE2rBdK-zJ6WM_j95eI.roa Signing time: Thu 01 Jan 2026 04:18:28 +0000 ROA not before: Thu 01 Jan 2026 04:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202736 IP address blocks: 192.200.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4c:61:f3:1f:ff:4b:83:c6:74:cd:f0:c4:78:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Jan 1 04:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9fe8f439d91ac4dab05d2becc9e9633f8fde5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:28:0f:bc:94:d6:eb:73:d9:53:a9:c2:75:1a: d5:a2:d7:e6:f0:b5:a5:c6:4a:88:87:ac:26:0d:6c: 32:a8:04:e3:6c:af:ec:e9:52:af:30:c9:e3:23:2d: 03:83:38:2f:30:35:4a:66:8d:24:2a:e3:81:b2:26: d3:6b:70:47:7d:4d:eb:64:95:17:f6:e6:21:14:03: da:8b:35:a1:e8:33:eb:a7:8c:bc:94:6a:1e:e7:0e: e5:4f:3a:e0:28:3a:a8:91:a4:be:2e:9f:ef:bf:78: 28:01:83:4c:65:a2:85:22:32:d1:27:97:fe:51:3f: 5b:dd:e0:6a:c8:63:c7:69:e4:2b:93:6a:f3:8a:87: 34:29:7b:f0:bb:44:d1:48:d5:3f:ca:56:02:4d:9a: 09:55:4c:9d:32:31:ce:2c:45:c9:6b:65:3d:27:0b: 38:13:c7:23:75:32:95:9e:d2:ae:9a:38:6e:e5:13: b1:0b:dc:0a:5e:85:25:55:36:1e:ef:96:df:8a:a5: 9a:42:c8:99:2f:6a:f0:fc:37:03:25:39:de:25:e4: 5f:28:61:17:b3:d7:f8:3d:b3:65:e2:4d:7e:15:ed: a7:7f:69:da:6a:0f:8c:76:db:5f:50:f8:d8:8f:c6: 7d:c1:98:9e:d8:53:8d:ff:38:f0:f5:bb:86:e4:8e: 52:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FE:8F:43:9D:91:AC:4D:AB:05:D2:BE:CC:9E:96:33:F8:FD:E5:E2 X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/2f6PQ52RrE2rBdK-zJ6WM_j95eI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.200.192.0/20 Signature Algorithm: sha256WithRSAEncryption 82:eb:80:24:1d:75:61:86:fa:14:24:6a:f4:2a:89:8e:d4:06: 80:2a:6b:6a:f7:bb:a0:a0:8c:82:c6:52:6b:46:cd:e6:36:f2: 91:64:30:a0:99:e8:64:4b:9a:40:f4:f4:e4:31:a8:57:0c:fa: f2:02:2e:c6:b8:53:3d:cf:70:e5:49:02:c9:f1:9c:4a:b3:73: 20:cd:30:f6:b5:5a:d5:61:df:c9:0f:4c:2e:28:81:b6:4f:a3: 29:f8:31:87:40:d4:ff:e0:5c:0a:28:c0:78:7b:0f:a9:80:fb: 21:22:d0:c5:d4:f2:b0:8b:45:ee:b7:e0:37:f8:d4:0b:74:90: 58:bd:a5:27:1e:ac:37:01:0b:2f:4c:39:a8:ea:d7:c0:94:01: 37:14:ef:50:70:43:12:01:0a:1f:33:17:d6:7c:94:2e:e6:42: 5d:96:02:99:73:a9:6d:c2:d5:f7:f6:6f:dd:97:16:78:0e:95: f6:ad:91:bc:3a:c5:68:93:8f:08:eb:dd:18:74:c2:63:17:a8: d4:26:d6:12:6a:d9:b0:24:73:22:8f:ee:73:da:36:e7:2b:3d: 51:13:22:f2:41:07:29:cc:c8:05:7d:8d:6d:1c:ba:88:71:ab: 96:f7:ca:5a:50:41:be:47:33:02:e4:37:f4:12:c1:66:69:73: 02:08:2c:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0xh8x//S4PGdM3wxHjcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMTAxMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWZlOGY0MzlkOTFhYzRkYWIwNWQyYmVjYzllOTYzM2Y4ZmRlNWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSgPvJTW63PZU6nCdRrVotfm8LWl xkqIh6wmDWwyqATjbK/s6VKvMMnjIy0DgzgvMDVKZo0kKuOBsibTa3BHfU3rZJUX 9uYhFAPaizWh6DPrp4y8lGoe5w7lTzrgKDqokaS+Lp/vv3goAYNMZaKFIjLRJ5f+ UT9b3eBqyGPHaeQrk2rzioc0KXvwu0TRSNU/ylYCTZoJVUydMjHOLEXJa2U9Jws4 E8cjdTKVntKumjhu5ROxC9wKXoUlVTYe75bfiqWaQsiZL2rw/DcDJTneJeRfKGEX s9f4PbNl4k1+Fe2nf2naag+MdttfUPjYj8Z9wZie2FON/zjw9buG5I5SzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNn+j0OdkaxNqwXSvsyeljP4/eXiMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvMmY2UFE1MlJyRTJyQmRLLXpKNldNX2o5NWVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwMjAMA0G CSqGSIb3DQEBCwUAA4IBAQCC64AkHXVhhvoUJGr0KomO1AaAKmtq97ugoIyCxlJr Rs3mNvKRZDCgmehkS5pA9PTkMahXDPryAi7GuFM9z3DlSQLJ8ZxKs3MgzTD2tVrV Yd/JD0wuKIG2T6Mp+DGHQNT/4FwKKMB4ew+pgPshItDF1PKwi0Xut+A3+NQLdJBY vaUnHqw3AQsvTDmo6tfAlAE3FO9QcEMSAQofMxfWfJQu5kJdlgKZc6ltwtX39m/d lxZ4DpX2rZG8OsVok48I690YdMJjF6jUJtYSatmwJHMij+5z2jbnKz1REyLyQQcp zMgFfY1tHLqIcauW98paUEG+RzMC5Df0EsFmaXMCCCzJ -----END CERTIFICATE-----Generated at Thu Jan 1 20:22:36 2026 by rpki-client